CVE advisoryCRITICAL
CVE-2019-12900
Bzip2 Out-of-Bounds Write Vulnerability
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the bzip2 compression library, allowing an out-of-bounds write when processing specially crafted files. If reachable, this could lead to system instability or code execution. This impacts systems and applications that rely on bzip2 for file decompression.